Privacy Policy
Effective: January 1, 2026
123 Solution Co., Ltd. (“Company”) complies with the Personal Information Protection Act and related laws, and establishes this Privacy Policy to protect users’ personal information.
1. Personal Data Collected
During sign-up and use, we may collect email, name, mobile number, country, payment and transaction records, and access logs (IP, access history). For social login, we collect profile information (e.g., email) provided by that service. To operate our points, digital badge, and review features, we also collect event pass admission records (QR code scans), user-generated content (reviews, star ratings, Q&A), achievement history, and newsletter subscription status. If you use the social features, we also collect your character avatar seed, the public code we issue to you, the record of hearts sent and received together with any messages, and referral relationships. We do not collect users’ GPS location.
2. Purpose of Collection and Use
To identify and manage members, process orders/payments/settlement, respond to inquiries, improve the service and prevent abuse, and fulfill legal obligations. We also use activity data to calculate and award reward points, issue digital achievement badges, publish and manage reviews and star ratings, and operate the social profile, hearts, and referral features.
3. Retention Period
In principle, data is destroyed without delay once its purpose is achieved. However, transaction/payment records are retained for statutory periods under applicable laws (e.g., contracts/withdrawal 5 years, payments 5 years, consumer complaints/disputes 3 years).
4. Provision to Third Parties
We do not provide personal data to third parties without consent, except as necessary to fulfill transactions (e.g., to the relevant Organizer or payment provider). We share the data needed to manage event access and verify QR code attendance with the Organizer of that event.
5. Information Visible to Other Users
(1) Reviews and Q&A posts you write are shown to other users together with the display name recorded at the time of posting. (2) If you use the social features, anyone who opens the QR link containing your public code can see your display name, character avatar, public code, total hearts received, and referral count. That page is viewable without signing in, but it is not indexed by search engines and cannot be reached without knowing your public code. (3) Who sent or received a heart, and any attached message, are visible only to the two people involved. (4) Your point balance, earned digital badges, and order history are visible only to you and are never shown to other users.
6. Entrustment of Processing
We may entrust certain processing to payment providers (e.g., PayVerse) and cloud infrastructure (e.g., Supabase), and supervise them to comply with the law.
7. Use of Cookies
We use only the minimum cookies needed to operate the service, such as keeping you signed in. We do not use advertising or analytics tracking cookies. See our Cookie Policy for details.
8. User Rights
Users may view or correct their personal data, or request account withdrawal (consent withdrawal) at any time via the account page or the contact below.
9. Destruction of Personal Data
Upon expiry of the retention period or achievement of purpose, electronic files are deleted irrecoverably and printouts are shredded or incinerated.
10. Security Measures
We apply administrative and technical safeguards including access control, encryption in transit, and access log retention.
11. Privacy Officer
Inquiries and complaints regarding personal data can be submitted to: bandnara123@gmail.com
12. Notice of Changes
Any change to this policy will be announced in advance within the Service, with the effective date and reason.